Naming Systems for Onion Services
This is a wiki page to organize knowledge about the various proposed naming systems for Onion Services. This page is meant to be used by researchers and developers interested in this topic.
What Are Naming Systems?
These are systems that map the big random-looking onion addresses into human readable names.
For example you can imagine the following useful map: debian -> sejnfjrq6szgca7v.onion
so that users can just write debian in their browser instead of having to remember that big string.
Security Properties
Desirable security properties include:
- Anonymous registrations
- Privacy-enhanced queries
- Strong integrity guarantees
- Globally-consistent mappings
- Distributed name management
Proposed Naming Systems
OnioNS
The Onion Name System, a New DNS for Tor Onion Services
Description
OnioNS, pronounced "onions", is a privacy-enhanced and metadata-free DNS for Tor onion services. It is also backwards-compatible with traditional .onion addresses, does not require any modifications to the Tor binary or network, and there are no central authorities in charge of the domain names. OnioNS was specifically engineered to solve the usability problem with onion services. This project was described in the paper "The Onion Name System: Tor-Powered Decentralized DNS for Tor Onion Services", which was accepted into PoPETS 2017. OnioNS also supports load-balancing at a name level. Development currently takes place on Github.
Security Properties
- Anonymous registrations - PGP key is optional, no personal information required
- Privacy-enhanced queries - uses 6-hop circuits
- Strong integrity - server responses are verified with a Merkle tree
- Decentralized control - a random set of 127 periodically-rotating Tor nodes manage names and publishes the Merkle tree root
- Globally-unique domain names with consistent mappings
- Support for authenticated denial-of-existence responses
- Server-server communication uses circuits
- Preloaded with reserved names to avoid phishing attacks
- Uses the latest block in Bitcoin as a CSPRNG
- Resistant to Sybil attacks
- Resistant to computational attacks
Drawbacks
- Users must install the software into the Tor Browser.
- Requires participation from Tor relay administrators.
- Users must trust a selection of Tor relays, Tor directory authorities, and Bitcoin during a query.
Namecoin
Namecoin is a fork of Bitcoin.
Description
Namecoin holds names in a blockchain. Name registration costs a virtual unit, denominated in namecoins.
Security Properties
- Privacy-enhanced queries: full-node clients and FBR-C clients (full block receive for current registrations) do not generate network traffic on lookups
- Globally unique names
- Backed by computational proof-of-work
- Purely distributed control of names (does not rely on Tor directory authorities or Tor relays)
- Authenticated denial-of-existence for full-node clients and FBR-C clients (full block receive for current registrations).
Drawbacks
- It is non-trivial to anonymously acquire Namecoins, which reduces the privacy of domain registration.
- Registrations are only pseudonymous unless Namecoin is used in conjunction with an anonymous blockchain such as Monero; decentralized exchanges between Monero and Namecoin are not yet deployed, so Monero to Namecoin exchanges require some counterparty risk.
- Full-node clients must download the blockchain, which may be impractical for some users, and becomes less usable as transaction volume increases.
- No authenticated denial-of-existence for clients that only download block headers (this can be fixed with a future softfork).
- Doesn't scale: it grows more secure but less usable as it becomes more popular.
GNU Name System (GNS)
Description
GNS uses a hierarchical system of directed graphs. Each user is node in the graph and they manage their own zone.
Security Properties
- Peer-to-peer design.
- Individuals are in charge of name management.
- Resistant to large-scale Sybil attack.
- Resistant to large-scale computational attack.
Drawbacks
- No guarantee that names are globally unique.
- Difficult to choose a trustworthy zone.
- The selection of a trustworthy zone centralizes the system.
Blockstack
Description
Security Properties
Drawbacks
TBB addon that does onion bookmarks
Description
Basically introduce the workflow where our users are supposed to bookmark their onions so that they remember them next time. A smart addon here could do it automatically for the users, or something.
Security Properties
Drawbacks
- Need to keep list (or hashes) of visited onions on the client's machine.
Centralized first-come-first-served name cache run by a dirauth
Description
Just run a NamingAuth on the network where HSes can go and register their names. Clients can query the NamingAuth direct, and can also cadd alternative naming auths.
A bit like the I2P naming system? (https://geti2p.net/hosts.txt)
Security Properties
- Simple and easy.
Drawbacks
- Centralized
InterPlanetary Naming System
Description
A naming system for IPFS. Can suit for .onion too.
Security Properties
To be evaluated
Drawbacks
To be evaluated.
Files with aliases
Description
Just hosts-like files with pairs . Widespread in I2P.
Security Properties
- Simple.
- Name resolution is done locally.
Drawbacks
- Centralized.
- Latent.
- Involves trust to everyone involved in list making.
- Markable. Malicious service can give different users different aliases.